{"id":483,"date":"2012-02-01T15:31:03","date_gmt":"2012-02-01T13:31:03","guid":{"rendered":"http:\/\/saisa.eu\/blogs\/Guidance\/?p=483"},"modified":"2012-04-03T14:18:21","modified_gmt":"2012-04-03T11:18:21","slug":"continuous-security-monitoring-new-draft-by-nist","status":"publish","type":"post","link":"https:\/\/saisa.eu\/blogs\/Guidance\/?p=483","title":{"rendered":"Continuous Security Monitoring, new draft by NIST"},"content":{"rendered":"

NIST has produced an interesting set<\/a> of drafts<\/a> related to Continuous Monitoring<\/a>(CM).<\/p>\n

Continuous Monitiring here can be explained by sentence:<\/p>\n

\n

“Continuous security monitoring is a risk management approach to Cybersecurity that maintains a
\n picture of an organization\u2019s security posture, provides visibility into assets, leverages use of
\n automated data feeds, monitors effectiveness of security controls, and enables prioritization of
\n remedies.”<\/em><\/p>\n<\/blockquote>\n

Enterprise Architecture view is presented below.<\/p>\n

\"NIST-CM-2\"<\/p>\n

 <\/p>\n

The material presented in these drafts are steps into good direction. It is definitely worth to look this material.<\/p>\n

Look also<\/p>\n